Application No. 10/660,476 
Attorney Docket No. 2557-0001 81/US 



AMENDMENTS TO THE SPECIFICATION 

Please amend the specification, as follows: 

Replace paragraph [0005] with the following amended paragraph [0005]: 

A Montgomery modular multiplication algorithm, known as the most effective modular 
multiplication algorithm, can be expressed in pseudo code, as in Algorithm 1 below: 
[Algorithm 1] 
Stimulus: 

A = (a n -i a n -2 . . . ai ao>2, and A < M 

B = (b n _i b n -2 . . . bi b 0 ) 2 , and B < M 

M = (m n -i m n _ 2 ... mi m^, and M is odd[[.]] 
Response: 

S = (Sft-S^-S^-^Si-So) (s.Sn^Sn-7 ... s 1 So)7 = ABR 1 (mod M) 
Method: 

S: = 0 
Fori: = 0 ton-1 do 

[[qi]] ai: = s 0 XOR(biANDao) 
S: = (S + biA + qi M)/2 

endfor 
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Replace paragraph [0018] with the following amended paragraph [0018]: 

The qi calculation logic circuit solves a Boolean logic equation "so XOR c 0 XOR (bi 
AND ao)", where s 0 is the least significant bit (LSB) of a sum S, c 0 is the LSB of a carry C 5 b\ is 
the bit value of the number B, and ao is the LSB of the number A, to obtain a bit value qi (where 
T denotes an integer in the range of 0 to [[n*l]] n-1) . 

Replace paragraph [0030] with the following amended paragraph [0030]: 

Another exemplary embodiment of the present invention[[,]] provides a method of 
performing a Montgomery modular multiplication in a Montgomery modular multiplier, which 
includes registers for storing bit values a;, bi, mi, Ci, and Si (where T denotes an integer in the 
range of 0 to [[n*l]] n-1) of a word A, a word B, a modulus M, a carry C, and a sum S, 
respectively, and calculates a value congruent to "ABR" 1 " (mod M), where A and B are input n- 
bit numbers, R" 1 is an inverse number of R modular-multiplied for "mod M", and M is a 
modulus. In the method, the number A, the number B, and the modulus M are received. The 
number A is multiplied by a bit value bi to obtain each bit of biA. A Boolean logic equation "so 
XOR Co XOR (bi AND ao)", where s 0 is the least significant bit (LSB) of a sum S, c 0 is the LSB 
of a carry C, bi is the bit value of the number B, and ao is the LSB of the number A, is obtained to 
obtain a bit value qi (where T denotes an integer in the range of 0 to [[n*l]] n-1) . The number 
M is multiplied by the bit value qi to obtain each bit of qiM. Then, X. additions are performed 
on the carry C, the sum S, the bjA, and the ^M to obtain interim values for each bit of the sum S 
and the carry C in a carry save adder structure, in response to a carry propagation adder signal. 



Application No. 10/660,476 
Attorney Docket No. 2557-000181/US 



The interim values are summed to obtain the final results of the sum S and carry C in a carry 
propagation adder structure, in response to the carry propagation adder signal. 

Replace paragraph [0045] with the following amended paragraph [0045]: 

The A-register 1 10 stores the bit value a* (where T denotes an integer in the range of 0 to 
[[n*l]] n-1) of the number A, which is smaller than the modulus M. The number A denotes a 
word representing an input n-bit number, and ai is the value of each of the bits ao to a n -i that 
constitute the number A. 

Replace paragraph [0046] with the following amended paragraph [0046]: 

The B-register 120 stores the bit value bj (where T denotes an integer in the range of 0 to 
[[n*l]] n-1 ) of the number B, which is smaller than the modulus M. The number B denotes a 
word representing an input n-bit number, and bi is the value of each of the bits bo to b n .i that 
constitute the number B. 

Replace paragraph [0047] with the following amended paragraph [0047]: 

The M-register 130 stores the bit value mi (where T denotes an integer in the range of 0 
to [[n*l]] n-1 ) of the modulus M, which is an odd number. The modulus M denotes a word 
representing an input n-bit number, and mi is the value of each of the bits mo to m n -i that 
constitute the modulus M. 
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Replace paragraph [0048] with the following amended paragraph [0048]: 

The biA calculation logic circuit 140 calculates each bit of b x A by multiplying the 
number A by the bit value bj. Consequently, the values of the 'n* bits fyao to bjan-i are output. At 
this time, since T varies from 0 to [[n*l]] nj, in the "for" loop included in Algorithm 1, the 
value bj is obtained from the position of the least significant bit (LSB) of the B-register 120, 
which is right shifted by one bit every time an algorithm in the "for" loop is performed, as shown 
in FIG. 1. 

Replace paragraph [0049] with the following amended paragraph [0049]: 

The qi calculation logic circuit 150 calculates the value q\ (where T denotes an integer in 
the range of 0 to [[n*l]] n-1 ) used in the "for" loop of Algorithm 1 by solving the Boolean logic 
equation "s 0 XOR c 0 XOR (bi AND ao)" Here, s 0 is the LSB of a sum S, c 0 is the LSB of a 
carry C, bj is a bit value of the number B, and a<> is the LSB of the number A. At this time, since 
T varies from 0 to [[n*l]] n^ in the "for" loop included in Algorithm 1, a value bj is obtained 
from the position of the LSB of the B-register 120, which is right shifted by one bit every time an 
algorithm in the "for" loop is performed, as shown in FIG. 1. 
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Replace paragraph [0050] with the following amended paragraph [0050]: 

The calculation logic circuit 160 calculates each bit of qjM by multiplying the 
modulus M by the bit value qi. Consequently, the values of the V bits qimo to qjm n -i are output. 
At this time, since T varies from 0 to [[n*l]] nA in the "for" loop included in Algorithm 1, T 
increases by one every time an algorithm in the "for" loop is performed, as shown in FIG. 1. 
Consequently, the values of the V bits q 0 to q n -i are output. 

Replace paragraph [0052] with the following amended paragraph [0052]: 

The S-register 180 updates and stores the bit value Sj of the sum S (where T denotes an 
integer in the range of 0 to [[n*l]] n-1) . In other words, sum S denotes a word representing an n- 
bit number that is output as a sum/and Sj denotes the value of each of the bits so to Sn_i that 
constitute the word S. The word S is updated every time an addition is performed in the carry 
save adder or carry propagation adder included in the 4-2 compressor 170. 

Replace paragraph [0053] with the following amended paragraph [0053]: 

The C-register 190 updates and stores the bit value Cj of the carry C (where V denotes an 
integer in the range of 0 to [[n*l]] n-1) . In other words, carry C denotes a word representing an 
n-bit number that is output as a carry, and Ci denotes the value of each of the bits c 0 to Cn_i that 
constitute the word C. The word C is updated every time an addition is performed in the carry 
save adder or carry propagation adder included in the 4-2 compressor 170. 

-6- 
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Replace paragraph [0061] with the following amended paragraph [0061]: 

The Montgomery modular multiplier according to an embodiment of the present 
invention includes registers, which store bit values aj, bi, mj, Ci, and Si (where T denotes an 
integer in the range of 0 to [[n*l]] n-1 ) of a word A, a word B, a modulus M, a carry C, and a 
sum S, respectively, and calculates a value congruent to "ABR" 1 " (mod M). Here, A and B are 
input n-bit numbers, and R" 1 is an inverse number of R modular-multiplied for "mod M [[A]]". 

Replace paragraph [0063] with the following amended paragraph [0063]: 

Thereafter, in step S3 15 to S3 19, the qi calculation logic circuit 150 of the Montgomery 
modular multiplier obtains a value q\ (where T denotes an integer in the range of 0 to [[n*l]] n^ 
I) used in the "for" loop of Algorithm 1, by solving the Boolean logic equation "s 0 XOR c 0 XOR 
(bi AND ao)" Here, s 0 is the LSB of a sum S, c 0 is the LSB of a carry C, bj is a bit value of the 
number B, and ao is the LSB of the number A. Also, in steps S3 15 to S3 19, the b\A calculation 
logic circuit 140 multiplies the number A by the bit value bi to obtain each bit of bjA, and the 
qiM calculation logic circuit 160 calculates each bit of qjM by multiplying the modulus M by the 
bit value qi. Also, in steps S3 15 to S3 19, the 4-2 compressor 170 performs V additions on the 
carry C, the sum S, the bjA, and the qiM to obtain interim values for each bit of the sum S and 
the carry C, in a carry save adder structure, which is formed when the carry propagation adder 
signal ONCPA is in an inactive state, that is, is in a first logic state ("0"). 
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Replace paragraph [0069] with the following amended paragraph [0069]: 

As described above, the Montgomery modular multiplier according to an embodiment of 
the present invention includes registers, which store bit values a i? bj, mj, Ci, and ^ (where T 
denotes an integer in the range of 0 to [[n*l]] n-1) of a word A, a word B, a modulus M, a 
carry C, and a sum S, respectively, and calculates a value congruent to "ABR" 1 " (mod M). Here, 
A and B are input n-bit numbers, and R" 1 is an inverse number of R modular-multiplied for 
"mod A". The bjA calculation logic circuit 140 calculates each bit of b{A by multiplying the 
number A by the bit value bj. At this time, the q\ calculation logic circuit 150 calculates a value 
qi (where T denotes an integer in the range of 0 to [[n*l]] n-1) by solving a Boolean logic 
equation "s 0 XOR c 0 XOR (bj AND a<>)". Here, s 0 is the LSB of a sum S, c 0 is the LSB of a 
carry C, bj is a bit value of the number B, and ao is the LSB of the number A. The qiM 
calculation logic circuit 160 calculates each bit of qiM by multiplying the modulus M by the bit 
value qi. In response to the carry propagation adder signal ONCPA, the 4-2 compressor 170 
performs 'n* additions on the carry C, the sum S, the bjA, and the qiM to obtain interim 
calculated values for each bit of the sum S and the carry C, in a carry save adder structure. Then, 
the 4-2 compressor 170 sums the interim calculated values to obtain the final results of the sum S 
and carry C in a carry propagation adder structure. The final results of the sum S and carry C are 
output to the S- and C-registers 180 and 190, respectively. 



